FreeBSD 13

FreeBSD 13 — timidity++-gtk — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — timidity++-gtk — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: TiMidity++ — Multiple vulnerabilities Related CVEs: CVE-2017-11546 CVE-2017-11547 CVE-2017-11549 Upstream summary: qflb.wu of DBAPPSecurity reports: Ihe insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 can cause a denial of service(divide-by-zero error […]

Read more
How to Deploy a Spring Boot Application on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Deploy a Spring Boot Application on FreeBSD 13

Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up deploy a spring boot application on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any […]

Read more
FreeBSD 13 — tidy-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — tidy-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tidy — heap-buffer-overflow Related CVEs: CVE-2015-5522 CVE-2015-5523 Upstream summary: Geoff McLane reports: tidy is affected by a write out of bounds when processing malformed html files. This issue could be […]

Read more
FreeBSD 13 — serendipity-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — serendipity-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: serendipity — multiple cross site scripting vulnerabilities Related CVEs: CVE-2008-1385 CVE-2008-1386 Upstream summary: Hanno Boeck reports: The installer of serendipity 1.3 has various Cross Site Scripting issues. This is considered […]

Read more
FreeBSD 13 — links — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — links — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: links — denial of service Related CVEs: CVE-2017-11114 Upstream summary: NIST reports: The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service […]

Read more
How to Install containerd on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Install containerd on FreeBSD 13

Introduction This guide explains how to Install containerd on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege separation. […]

Read more
FreeBSD 13 — py27-amf — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py27-amf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-amf — input sanitization errors Related CVEs: CVE-2015-8549 Upstream summary: oCERT reports: A specially crafted AMF payload, containing malicious references to XML external entities, can be used to trigger Denial […]

Read more
FreeBSD 13 — py27-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py27-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]

Read more
FreeBSD 13 — alsaplayer — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — alsaplayer — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: alsaplayer — multiple vulnerabilities Related CVEs: CVE-2006-4089 Upstream summary: Luigi Auriemma reports three vulnerabilities within alsaplayer: The function which handles the HTTP connections is vulnerable to a buffer-overflow that happens […]

Read more
FreeBSD 13 — qutebrowser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — qutebrowser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qutebrowser — Reloading page with certificate errors shows a green URL Related CVEs: CVE-2018-10895 CVE-2020-11054 Upstream summary: Qutebrowser developers report: After a certificate error was overridden by the user, qutebrowser […]

Read more
CHAT